This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json) Hash identifier: JgdMcXg0vm9mo9SdJHqKl2JYdjdEhV0atqtoaEoU+FA= Subject key identifier: CF:0F:15:54:8D:23:5B:DB:88:FB:BA:E3:29:12:7D:B5:65:A0:24:CD Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58 Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458 Certificate serial: 019C4323088513031E7813240E148FEBFB2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:35 +0000 Manifest this update: Mon 09 Feb 2026 16:01:35 +0000 Manifest next update: Tue 10 Feb 2026 16:01:35 +0000 Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: grWG/b/Qr9YxqBawbeUvBXkpPGgZasLOZybf2o/OflM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:08:85:13:03:1e:78:13:24:0e:14:8f:eb:fb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458 Validity Not Before: Feb 9 16:01:35 2026 GMT Not After : Feb 10 16:01:35 2026 GMT Subject: CN=cf0f15548d235bdb88fbbae329127db565a024cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:ed:93:36:0a:80:dc:53:bb:b2:89:3f:8d: c6:19:1c:78:20:b8:a5:7b:8a:06:50:aa:e5:a5:49: de:81:77:76:47:b1:37:a9:53:64:cd:ee:38:3b:81: 8c:3c:8d:e9:0c:ef:30:25:14:9c:e8:c3:ce:02:07: 3d:31:a5:97:80:d7:2e:25:55:f0:e1:93:b8:26:18: 48:92:1c:a3:3d:10:90:4c:a7:13:84:b3:99:42:5a: 48:5d:41:76:18:5e:a1:1e:91:bf:66:56:4f:8e:7c: fa:58:f9:9e:25:20:e5:45:92:e8:f3:16:2b:d7:1f: 23:40:aa:9d:2e:5c:47:7b:f4:33:b0:eb:14:c3:d8: e7:03:d1:26:e4:06:c1:b2:d3:02:6d:88:96:35:10: 51:9d:bc:7d:79:81:e8:db:3a:f0:b6:36:76:1e:18: 77:64:72:24:ab:5f:8c:77:13:91:ef:71:fe:10:fb: ec:f7:33:0e:fb:07:94:bf:68:93:5d:cf:5e:36:66: 20:da:fe:0d:38:94:7a:8f:02:8d:7b:26:8d:8c:d7: a7:66:e5:c3:4d:90:9c:02:f7:6a:e0:57:b4:ec:97: a1:c5:a5:9e:ea:2d:a2:63:f2:ed:6f:25:a6:0d:99: 8c:21:85:8e:e1:76:d4:e4:fb:87:dd:3e:69:6b:81: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:15:54:8D:23:5B:DB:88:FB:BA:E3:29:12:7D:B5:65:A0:24:CD X509v3 Authority Key Identifier: keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:1c:92:7e:dd:f9:53:e2:c1:0f:b6:4c:b1:10:b8:5a:01:a0: 90:eb:35:31:01:10:e5:16:76:c4:07:e0:02:1c:9f:e4:c0:2d: de:ed:fc:16:5a:7f:06:02:95:48:18:ea:8d:0c:9f:59:16:e3: 2d:d3:d7:81:07:f8:12:2d:c5:09:a7:7f:9e:a1:ed:fc:30:03: 5f:e3:a0:ad:3a:0a:6d:36:2c:bc:a6:f3:bc:dd:59:c9:f1:01: b1:20:a1:26:5e:84:d9:2f:d9:d7:cc:f2:d6:00:6d:ca:0f:bd: 37:1a:eb:9f:f3:b1:1c:a5:34:f5:27:31:72:b3:27:e5:9c:6a: d4:6b:0b:af:5c:28:4d:ec:d4:73:4d:7c:6a:b9:93:de:41:c0: 44:38:bf:72:44:1b:fa:32:47:4e:48:6d:26:09:ae:a0:d3:b5: a9:9e:78:e8:e1:50:5d:6e:ce:fc:ef:45:17:f3:df:a3:8f:30: cb:7f:5e:71:9f:99:cd:38:c0:91:b9:da:cf:44:a9:1c:75:98: 36:46:a5:bb:2d:be:d4:3f:23:13:cf:53:25:26:36:c6:7d:d2: fe:80:30:05:47:94:6a:ab:fc:74:51:a6:ab:2a:31:b9:74:64: 6b:22:6c:85:f1:0c:28:e9:fd:57:02:f9:22:30:6a:83:f3:ad: 47:63:7e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIwiFEwMeeBMkDhSP6/svMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODRhOWRiZTYzMTBkN2JmYWU4MzhiYTIyZmEwNDcxMjZi NTU0NTgwHhcNMjYwMjA5MTYwMTM1WhcNMjYwMjEwMTYwMTM1WjAzMTEwLwYDVQQD EyhjZjBmMTU1NDhkMjM1YmRiODhmYmJhZTMyOTEyN2RiNTY1YTAyNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDbtkzYKgNxTu7KJP43GGRx4ILil e4oGUKrlpUnegXd2R7E3qVNkze44O4GMPI3pDO8wJRSc6MPOAgc9MaWXgNcuJVXw 4ZO4JhhIkhyjPRCQTKcThLOZQlpIXUF2GF6hHpG/ZlZPjnz6WPmeJSDlRZLo8xYr 1x8jQKqdLlxHe/QzsOsUw9jnA9Em5AbBstMCbYiWNRBRnbx9eYHo2zrwtjZ2Hhh3 ZHIkq1+MdxOR73H+EPvs9zMO+weUv2iTXc9eNmYg2v4NOJR6jwKNeyaNjNenZuXD TZCcAvdq4Fe07JehxaWe6i2iY/LtbyWmDZmMIYWO4XbU5PuH3T5pa4GXVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8PFVSNI1vbiPu64ykSfbVloCTNMB8GA1UdIwQY MBaAFAuEqdvmMQ17+ug4uiL6BHEmtVRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTkt YTg1ZGRlMjE0NWVhLzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTktYTg1ZGRlMjE0NWVh LzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBySft35 U+LBD7ZMsRC4WgGgkOs1MQEQ5RZ2xAfgAhyf5MAt3u38Flp/BgKVSBjqjQyfWRbj LdPXgQf4Ei3FCad/nqHt/DADX+OgrToKbTYsvKbzvN1ZyfEBsSChJl6E2S/Z18zy 1gBtyg+9Nxrrn/OxHKU09ScxcrMn5Zxq1GsLr1woTezUc018armT3kHARDi/ckQb +jJHTkhtJgmuoNO1qZ546OFQXW7O/O9FF/Pfo48wy39ecZ+ZzTjAkbnaz0SpHHWY Nkaluy2+1D8jE89TJSY2xn3S/oAwBUeUaqv8dFGmqyoxuXRkayJshfEMKOn9VwL5 IjBqg/OtR2N+1w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:35 2026 by rpki-client